CVE-2022-49254

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-49254
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49254.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49254
Downstream
Related
Published
2025-02-26T01:56:09.619Z
Modified
2026-04-02T08:27:26.494161Z
Summary
media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats()
Details

In the Linux kernel, the following vulnerability has been resolved:

media: ti-vpe: cal: Fix a NULL pointer dereference in calctxv4l2initformats()

In calctxv4l2initformats(), devmkzalloc() is assigned to ctx->activefmt and there is a dereference of it after that, which could lead to NULL pointer dereference on failure of devm_kzalloc().

Fix this bug by adding a NULL check of ctx->active_fmt.

This bug was found by a static analyzer.

Builds with 'make allyesconfig' show no new warnings, and our static analyzer no longer warns about this code.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49254.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7168155002cf7aadbfaa14a28f037c880a214764
Fixed
aa613ac270292e102503e9767882e39200efe608
Fixed
91e2805579ab0783eed53acc2bf9fb553e939004
Fixed
1381f1a629a090c251965edb56f849ad648414a4
Fixed
abd77889851d2ead0d0c9c4d29f1808801477b00

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49254.json"